arcgis-scene-environment
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill utilizes external identifiers such as web scene IDs and supports Arcade expressions for dynamic styling, which creates an ingestion surface for external data.
- Ingestion points:
item-idparameter in web scene components andexpressionfields in elevation configuration. - Boundary markers: Not specified in these code snippets.
- Capability inventory: View modification, layer configuration, and screen capture functionality.
- Sanitization: Relies on the host environment and SDK for validation.
- [DYNAMIC_EXECUTION]: The skill uses Arcade expressions to dynamically compute elevation offsets at runtime, representing a domain-specific form of logic execution inherent to the ArcGIS platform.
- [EXTERNAL_DOWNLOADS]: Fetches elevation data from the official ArcGIS World Elevation service at
elevation.arcgis.com.
Audit Metadata